Re: logging into slave ldap server

[Stefan Alfredsson <bulk@alfredsson.org>]

On Mon, Mar 11, 2002 at 01:51:33PM -0800, nate wrote:
> I have been trying to login to one of my slave LDAP
> servers and everytime I try i always get "invalid credentials".
> Replication seems to be working as I can see the new
> samba stuff I added to the master on friday(or was it thursday),
> And i can browse the tree, I just cannot authenticate as
> the admin user. which is the same as on the master ldap
> server.

Is the "rootdn" and "rootpw" entries in slapd.conf the same on both
machines? (i.e. maybe you forgot to update it on the slave,
or maybe the "rootdn" is the replicating user)

ie: on master you have
rootdn	"cn=admin,dc=com"
rootpw   {SSHA}xxxx

and on the slave
rootdn   "cn=replicator,dc=com"
rootpw   {SSHA}yyyy

and then I assume you have an entry "cn=admin,dc=com" entry in your
database?

This means that you would have two set the rootpw in two places;
When authentication with master, you are verified against the rootpw
in slapd.conf. When authenticating against the slave (using the same
dn), then the userPassword of the admin _database entry_ is used...

Atleast if I understand the authentication process correctly :)

HTH,
 Stefan